Medium
CVE-2025-22790
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2025-22786
ElementInvader Addons for Elementor <= 1.2.6 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-22799
Neon Product Designer <= 2.1.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-22789
polka dots <= 1.2 - Reflected Cross-Site Scripting
High
CVE-2025-22782
WR Price List Manager For Woocommerce <= 1.0.8 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-22797
Gallery and Lightbox <= 1.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12412
Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-12519
TCBD Auto Refresher <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11758
WP SPID Italia <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11892
Accordion Slider Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11386
GatorMail SmartForms <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12527
Perfect Portal Widgets <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12520
Dominion – Domain Checker for WPBakery <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11915
RRAddons for Elementor <= 1.1.0 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-11874
Grid Accordion Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12407
Push Notification for Post and BuddyPress <= 2.07 - Reflected Cross-Site Scripting
Medium
CVE-2024-12116
Unlimited Theme Addon For Elementor and WooCommerce <= 1.2.2 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-12304
Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.4.2 - Authenticated (contributor+) Stored Cross-Site Scripting via Button Link
Medium
CVE-2024-12472
Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure
High
CVE-2024-12627
Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups <= 1.3.5 - Missing Authorization to Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-12204
Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups <= 1.3.5 - Missing Authorization
Medium
CVE-2024-12505
Trackserver <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12404
CF Internal Link Shortcode <= 1.1.0 - Unauthenticated SQL Injection
Medium
CVE-2024-13221
Fantastic Elasticsearch <= 4.1.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.